> JapanHacked_
[Investigating][Severity: Major][Ransomware]

Ghibli Park: names and addresses of 1,525 staff applicants were stolen from a contractor's recruitment system, and the contractor was asked for money

On September 22, personal data of 1,525 applicants was stolen from the recruitment system of Tetsu Corporation, the contractor supplying staff.

Disclosed

2022-09-24

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

What happened

  1. The contractor Tetsu Corporation was accessed without authorization and applicants' personal data was stolen from its recruitment management system. The attacker demanded money from the company. [1]

  2. It reported to the police, began contacting the applicants and announced the case. [1]

Impact

The names, addresses and other data of 1,525 people who applied to work at Ghibli Park were stolen. Nikkei xTECH reported that a ransomware method that demands a ransom was used. [1]

Timeline

  1. Started, Detected 2022-09-22
  2. Disclosed 2022-09-24
  3. 2 days

Attack or cause

Method
[Ransomware]
Impact
[Data leak][Extortion]
Entry point
Supplier

Data exposed or at risk

[Name][Postal address]

Supply chain

Organizations listed on this site
1

Organizations involved

Open in organization search

Sources

  1. [1][News]ジブリパークのスタッフ応募者1525人の情報が漏洩、業務委託先にランサムウエア攻撃 | 日経クロステック(xTECH)Nikkei xTECH · 2022-09-26